$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft File: hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json) Hash identifier: e3DEgCseJ5dpxINmfukapFPHgoXHNAUpv7I1JKamlYU= Subject key identifier: E8:38:40:92:0F:D8:37:4F:B9:83:41:17:2E:7A:B7:00:DC:BF:3A:87 Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Certificate serial: 354F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft Manifest number: 3526 Signing time: Wed 22 Oct 2025 14:24:17 +0000 Manifest this update: Wed 22 Oct 2025 14:24:17 +0000 Manifest next update: Wed 29 Oct 2025 14:24:17 +0000 Files and hashes: 1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: iATCbW3592c5egGlTP6AoEbnyOTrzu8xnxopbA4KO4I=) 2: D750ADC20ACF11F0B4EBA55FC4F9AE02.roa (hash: NL1ARYRNOz8aLxkxUrPpKF6D4wwBVw7q5BCEbZZrFuo=) 3: AF6AA9ECFF6011ED90C62C26C4F9AE02.roa (hash: I6SN+VthWHNwpn13bC2pRMPfdtmxkMFNn0d1M2WvxFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13647 (0x354f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Validity Not Before: Oct 22 14:24:17 2025 GMT Not After : Oct 29 14:24:17 2025 GMT Subject: CN=68f8e911-0641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:76:29:fd:a0:84:ba:2b:7b:99:6a:12:28: 6b:be:58:cc:11:66:9e:b7:ac:18:2c:85:30:f7:bf: f1:54:0a:b6:51:2b:f2:3d:30:bb:44:d4:d6:37:7e: 4b:fa:a1:17:78:d7:d0:d1:d8:fe:52:76:07:d5:59: ad:26:6b:d5:4e:0d:a4:0d:17:ec:c8:13:c5:54:fe: f9:b8:48:44:8e:e1:c5:4e:e0:d3:07:0d:58:fe:c7: b5:d9:ce:ea:28:4e:c7:d9:3c:b4:4e:89:2b:54:5e: 20:71:f2:dc:a3:9d:20:d6:8c:6c:77:4f:56:7d:80: da:df:47:04:2d:4c:ef:12:3a:4a:cd:ce:59:91:56: 12:3e:22:0d:f9:e0:65:9c:ab:d5:8e:25:76:15:28: b9:fe:5b:e4:e9:26:f5:dd:ed:23:3f:f2:97:53:5b: cc:4d:e9:7a:9b:63:a2:55:53:2f:db:8e:29:99:43: 65:4f:15:29:e9:2d:6f:f5:07:73:6e:43:6e:5c:a2: ed:ed:73:94:a7:ea:be:24:d9:cf:39:f5:e6:87:c0: 6f:b6:23:f9:98:c6:b8:3c:c5:5d:17:eb:07:63:c3: fc:25:48:4a:42:60:5e:16:39:07:ff:de:46:14:ec: 86:a1:ac:f0:6a:90:b4:36:a6:41:45:88:29:72:b6: 2c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:38:40:92:0F:D8:37:4F:B9:83:41:17:2E:7A:B7:00:DC:BF:3A:87 X509v3 Authority Key Identifier: keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:43:93:c4:cb:74:a5:72:8c:17:85:1a:0f:a7:c4:0f:08:da: fa:91:6a:b0:6a:8b:30:e8:4d:14:a7:a1:b8:e0:e4:f8:d8:ac: 9f:ed:cd:fa:e5:72:d7:7f:cc:26:a9:ea:0f:08:53:61:e4:d9: 55:9c:20:ce:19:f8:01:c1:f7:4d:6e:fd:0a:de:4f:2b:3b:02: 63:6a:70:8e:ca:a7:6e:42:99:c9:f9:03:e8:3b:cc:2a:d9:74: 8f:ca:bd:2b:45:9b:e0:0f:55:85:09:a5:17:9d:d8:20:03:fa: 54:c2:f0:ac:d5:f6:7f:cd:c1:14:ea:f8:a3:90:1e:2a:4d:40: fc:17:ea:64:1b:4c:3f:87:ce:83:f9:32:3e:7f:aa:6e:2a:e8: dd:22:b8:23:5c:c8:38:35:7b:81:d3:2e:d2:56:74:6c:d8:34: f8:ae:08:c1:54:c9:fc:d9:f9:68:41:17:d0:94:93:55:3d:8f: 22:d9:40:02:82:3d:64:58:da:0a:99:3b:90:ea:0c:72:fb:a9: 72:a3:da:be:d4:99:1b:2c:9a:97:c8:3a:8d:cf:40:9a:4c:ea: d9:9c:8c:e1:4b:8e:71:13:a9:51:1c:a6:3f:fe:a1:cb:3c:57: 68:3e:3d:d8:b0:d2:14:84:84:25:20:a3:38:9c:46:b7:f2:ee: 83:f6:51:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw QzJDRTQ5QjQwHhcNMjUxMDIyMTQyNDE3WhcNMjUxMDI5MTQyNDE3WjAYMRYwFAYD VQQDEw02OGY4ZTkxMS0wNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIl2Kf2ghLore5lqEihrvljMEWaet6wYLIUw97/xVAq2USvyPTC7RNTWN35L +qEXeNfQ0dj+UnYH1VmtJmvVTg2kDRfsyBPFVP75uEhEjuHFTuDTBw1Y/se12c7q KE7H2Ty0TokrVF4gcfLco50g1oxsd09WfYDa30cELUzvEjpKzc5ZkVYSPiIN+eBl nKvVjiV2FSi5/lvk6Sb13e0jP/KXU1vMTel6m2OiVVMv244pmUNlTxUp6S1v9Qdz bkNuXKLt7XOUp+q+JNnPOfXmh8BvtiP5mMa4PMVdF+sHY8P8JUhKQmBeFjkH/95G FOyGoazwapC0NqZBRYgpcrYsfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg4QJIP 2DdPuYNBFy56twDcvzqHMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEI5OS9EM0Y5MDUxQzFEODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBY c0Zid0t5ZVRRTk1NTE9TYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASQ5PEy3SlcowXhRoPp8QPCNr6kWqwaosw6E0Up6G44OT42Kyf7c36 5XLXf8wmqeoPCFNh5NlVnCDOGfgBwfdNbv0K3k8rOwJjanCOyqduQpnJ+QPoO8wq 2XSPyr0rRZvgD1WFCaUXndggA/pUwvCs1fZ/zcEU6vijkB4qTUD8F+pkG0w/h86D +TI+f6puKujdIrgjXMg4NXuB0y7SVnRs2DT4rgjBVMn82floQRfQlJNVPY8i2UAC gj1kWNoKmTuQ6gxy+6lyo9q+1JkbLJqXyDqNz0CaTOrZnIzhS45xE6lRHKY//qHL PFdoPj3YsNIUhIQlIKM4nEa38u6D9lFn -----END CERTIFICATE-----Generated at Wed Oct 22 21:39:13 2025 by rpki-client